<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>OCSP on Vonng</title><link>https://vonng.com/en/tags/ocsp/</link><description>Recent content in OCSP on Vonng</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>rh@vonng.com (Ruohang Feng)</managingEditor><webMaster>rh@vonng.com (Ruohang Feng)</webMaster><copyright>© 2025 Ruohang Feng</copyright><lastBuildDate>Mon, 16 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://vonng.com/en/tags/ocsp/index.xml" rel="self" type="application/rss+xml"/><item><title>360 Shipped Its Wildcard TLS Private Key Inside a Public Installer</title><link>https://vonng.com/en/db/claude-360-claw/</link><pubDate>Mon, 16 Mar 2026 00:00:00 +0000</pubDate><author>rh@vonng.com (Ruohang Feng)</author><guid>https://vonng.com/en/db/claude-360-claw/</guid><description>360&amp;rsquo;s newly released AI Agent product shipped a public installer containing the private key for its &lt;code>*.myclaw.360.cn&lt;/code> wildcard certificate. Public verification and local reproduction also exposed inconsistencies in the OCSP revocation path.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://vonng.com/db/claude-360-claw/featured.svg"/></item></channel></rss>